CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66150

    🚨 CVE-2026-66150 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an...

  • CVE-2026-66154

    🚨 CVE-2026-66154 An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build...

  • CVE-2026-6484

    🚨 CVE-2026-6484 In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

  • CVE-2026-64927

    🚨 CVE-2026-64927 A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to...

  • CVE-2026-66878

    🚨 CVE-2026-66878 A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of...

  • CVE-2026-70398

    🚨 CVE-2026-70398 A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability...

  • CVE-2026-64954

    🚨 CVE-2026-64954 Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they...

  • CVE-2026-66659

    🚨 CVE-2026-66659 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table...

  • CVE-2026-64951

    🚨 CVE-2026-64951 A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs...

  • CVE-2026-64952

    🚨 CVE-2026-64952 The hunt_delete() VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only...

  • CVE-2026-64955

    🚨 CVE-2026-64955 When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files...

  • CVE-2026-68868

    🚨 CVE-2026-68868 The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving...

  • CVE-2026-53996

    🚨 CVE-2026-53996 NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged...

  • CVE-2026-57858

    🚨 CVE-2026-57858 Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager...

  • CVE-2026-67285

    🚨 CVE-2026-67285 Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An...

  • CVE-2026-50561

    🚨 CVE-2026-50561 Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2...

  • CVE-2026-66375

    🚨 CVE-2026-66375 A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.

  • CVE-2026-66376

    🚨 CVE-2026-66376 Credentials for a deleted user may remain valid for a short period under specific conditions.

Статистика статей

Статьи
53,088
Просмотры
264,220
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху